CVE List

Id CVE No. Status Description Phase Votes Comments Actions
11715  CVE-2005-0509  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".  Assigned (20050222)  None (candidate not yet proposed)    View
11714  CVE-2005-0508  Candidate  Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a "script security issue."  Assigned (20050222)  None (candidate not yet proposed)    View
11713  CVE-2005-0507  Candidate  Directory traversal vulnerability in SD Server 4.0.70 and earlier allows remote attackers to read arbitrary files via .. sequences in an HTTP request.  Assigned (20050222)  None (candidate not yet proposed)    View
11712  CVE-2005-0506  Candidate  The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users to steal usernames and passwords and impersonate other users via keys such as AvayaIP400Generic.  Assigned (20050222)  None (candidate not yet proposed)    View
11711  CVE-2005-0505  Candidate  Unknown vulnerability in Information Resource Manager (IRM) before 1.5.2.1 allows remote attackers has "potentially serious" impact, related to LDAP logins.  Assigned (20050222)  None (candidate not yet proposed)    View

Page 18601 of 20943, showing 5 records out of 104715 total, starting on record 93001, ending on 93005

Actions